Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/quantco/conda-deny
🔎🐍 A CLI tool to check your project's dependencies for license compliance
https://github.com/quantco/conda-deny
Last synced: about 2 months ago
JSON representation
🔎🐍 A CLI tool to check your project's dependencies for license compliance
- Host: GitHub
- URL: https://github.com/quantco/conda-deny
- Owner: Quantco
- License: bsd-3-clause
- Created: 2024-10-21T15:55:56.000Z (2 months ago)
- Default Branch: main
- Last Pushed: 2024-11-05T11:31:56.000Z (about 2 months ago)
- Last Synced: 2024-11-05T12:44:56.681Z (about 2 months ago)
- Language: Rust
- Size: 2.97 MB
- Stars: 13
- Watchers: 4
- Forks: 0
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
README
[![License][license-badge]](LICENSE)
[![CI Status][ci-badge]][ci]
[![Binary Build][binary-build-badge]][binary-build]
[![Conda Platform][conda-badge]][conda-url]
[![Codecov][codecov]][codecov-url]
[license-badge]: https://img.shields.io/github/license/quantco/conda-deny?style=flat-square
[ci-badge]: https://img.shields.io/github/actions/workflow/status/quantco/conda-deny/ci.yml?branch=main&style=flat-square&label=CI
[ci]: https://github.com/quantco/conda-deny/actions/workflows/ci.yml
[binary-build-badge]: https://img.shields.io/github/actions/workflow/status/quantco/conda-deny/build.yml?branch=main&style=flat-square&label=Binary%20Build
[binary-build]: https://github.com/quantco/conda-deny/actions/workflows/build.yml
[conda-badge]: https://img.shields.io/conda/vn/conda-forge/conda-deny?style=flat-square
[conda-url]: https://prefix.dev/channels/conda-forge/packages/conda-deny
[codecov]: https://img.shields.io/codecov/c/github/quantco/conda-deny/main?style=flat-square
[codecov-url]: https://codecov.io/gh/Quantco/conda-deny
## 🗂 Table of Contents
- [Introduction](#-introduction)
- [Installation](#-installation)
- [Usage](#-usage)
## 📖 Introduction
conda-deny is a CLI tool for checking software environment dependencies for license compliance.
Compliance is checked with regard to a whitelist of licenses provided by the user.
## 💿 Installation
You can install `conda-deny` using `pixi`:
```bash
pixi global install conda-deny
```
Or by downloading our pre-built binaries from the [releases page](https://github.com/quantco/conda-deny/releases).
## 🎯 Usage
`conda-deny` can be configured in your `pixi.toml` or `pyproject.toml` (`pixi.toml` is preferred).
The tool expects a configuration in the following format:
```toml
[tool.conda-deny]
#--------------------------------------------------------
# General setup options:
#--------------------------------------------------------
license-whitelist = "https://raw.githubusercontent.com/QuantCo/conda-deny/main/tests/test_remote_base_configs/conda-deny-license_whitelist.toml" # or ["license_whitelist.toml", "other_license_whitelist.toml"]
platform = "linux-64" # or ["linux-64", "osx-arm64"]
environment = "default" # or ["default", "py39", "py310", "prod"]
lockfile = "environment/pixi.lock" # or ["environment1/pixi.lock", "environment2/pixi.lock"]
#--------------------------------------------------------
# License whitelist directly in configuration file:
#--------------------------------------------------------
safe-licenses = ["MIT", "BSD-3-Clause"]
ignore-packages = [
{ package = "make", version = "0.1.0" },
]
```
After installing `conda-deny`, you can run `conda-deny check` in your project.
This then checks `pixi.lock` to determine the packages (and their versions) used in your project.